CVE-2026-34110
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A vulnerability in the Guardian language-system allows an unauthenticated remote attacker to execute arbitrary OS commands by injecting shell metacharacters into the 'id' parameter in complex_start.php. The lack of input validation and direct use of exec() without sanitization enables full server compromise.
Risk Assessment
An attacker can fully compromise the server, steal data, install malware, or use the server for further attacks. The absence of authentication increases the risk of exploitation by anyone with network access.
Recommendation
Immediately update the Guardian language-system to the latest patched version. As a temporary measure, block access to complex_start.php and implement strict input validation and sanitization for all parameters.
Other vulnerabilities in Guardian language-system
See all- CVE-2026-34117Critical
A vulnerability in the Guardian language-system allows an unauthenticated remote attacker to execute arbitrary OS commands by injecting shell metacharacters into the id parameter passed to the exec() function in text_to_subtitles.php.
- CVE-2026-34115Critical
A vulnerability in the Guardian language-system allows an unauthenticated remote attacker to execute arbitrary OS commands by injecting shell metacharacters into the 'id' parameter passed to the PHP exec() function in transcribe_amazon.php.
- CVE-2026-34112Critical
A vulnerability in the Guardian language-system allows an unauthenticated attacker to execute arbitrary OS commands remotely by injecting shell metacharacters into the 'id' parameter passed directly to the PHP exec() function in speechmac.php.
- CVE-2026-34111Critical
A vulnerability in the Guardian language-system allows an unauthenticated remote attacker to execute arbitrary OS commands by injecting shell metacharacters into the id parameter, which is passed unsanitized to the PHP exec() function in speechmac_text.php. No authentication is required for exploitation.
- CVE-2026-34107Critical
A vulnerability in the Guardian language-system allows an unauthenticated attacker to execute arbitrary OS commands remotely by injecting shell metacharacters into the 'id' parameter in translate.php.
- CVE-2026-34099Critical
An SQL injection vulnerability in Guardian language-system allows an unauthenticated attacker to inject SQL code via the id parameter in job_info.php. Lack of input sanitization enables extraction of database version, current user, schema names, and table contents.
- CVE-2026-34105High
SQL Injection vulnerability in Guardian language-system allows an authenticated attacker to inject SQL code via the id parameter in translate_text.php. Lack of input sanitization enables extraction of database contents.
- CVE-2026-34104High
An SQL injection vulnerability in Guardian language-system allows an authenticated attacker to inject malicious SQL via the 'name' GET parameter in designer.php. Unsanitized input enables arbitrary SQL execution and extraction of database contents.
- CVE-2026-34103High
An SQL injection vulnerability in the Guardian language-system allows an authenticated attacker to inject malicious SQL code via the GET parameter 'id' in subtitles.php. Lack of input sanitization enables error-based SQL injection to extract database contents.
- CVE-2026-34102High
An SQL injection vulnerability in Guardian language-system allows an authenticated attacker to inject malicious SQL via the 'id' parameter in job_info_get.php. Unsanitized input enables error-based SQL injection to extract database contents.
Original NVD description (English source)
Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/complex.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS